6b155c52f86ee9f9ad11637e276146a4dc275ca33a514c27bceefdcdadbf2996 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6b155c52f86ee9f9ad11637e276146a4dc275ca33a514c27bceefdcdadbf2996
Size

320KB
MD5

a2a8b8d8d9452addab3acf8383489270
SHA1

78b38f88af1368ca3234df90f11a05e53498ccc7
SHA256

6b155c52f86ee9f9ad11637e276146a4dc275ca33a514c27bceefdcdadbf2996
SHA512

ce5d5aff8054e1a9378e2b01847cd120783cef4f1d186c7890025d88b9c3df64ac6658404e5249a2cf80467ba0e9752d879171e923b93022014911e58fb230f1
SSDEEP

6144:gwztg5/iWLH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:FK4WD2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

6b155c52f86ee9f9ad11637e276146a4dc275ca33a514c27bceefdcdadbf2996
.exe windows x86

fc4ba1a2cf1873a9efaf8cee995c54b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegisterConsoleOS2
QueryDosDeviceA
BeginUpdateResourceW
_lcreat
VDMConsoleOperation
UTUnRegister
DeleteCriticalSection
WritePrivateProfileStructA
ZombifyActCtx
EnumSystemLanguageGroupsA
SetProcessAffinityMask

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE